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HFnr&iwr s -s «fe e> tc^„ 

3KU S/-|ffi*S:««LfeU K*:x* > h 4 0 

If 110 ££t"7#ttT, V 7-* K^f > h 4 0 ^ 
kz^T^-fexH^i l o<27^*X;tf;in?&-5-r-2 

£tC<fc»J, ZlCDT^iz^M^l 1 0 ?rfFnj1-SA^^$: 

2 o (c«fc >)wm*tz\tmm^%x-ihz> nwmztit-Zk 
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[#fF«#©«SH] 
hi:, 

fl-SU^ feflfflB^- ^77^f 7 * iz "T £ £#)©/' 
-iz;*jg*£SWtfttT, 8WEU v-x K*a* > h*»6 

:>-fPffi#S£, 10 
A. 

fc, ^•f*i©BaiBiWf#©^t!jiB7KUi/-^illi#®^e > 

SfcfrlC^-ST^izxfcirtS^fC, ByfB^'Ji/-fF 30 
U 

mbT«f^U^-Wfil5^«tCT^'fe^SI#S:«frr* 40 

tfne* 'J t/-snii^gb^ btimr ? 7 

©8&ig£ffl:grC'£sz:£: &#jSi:1-Sfi#«3 tCf£$£© 
*^5£«>©7*i<:Xi|:£$:gtttftf-C 7*iZX*f#i 50 
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©*&Ji *W »J|&&» if e> *^ SrAWrf * >y ^{C^rf 
S^f y &-a&3 i: fefmfc* 5 (CgBigg© 

so fii^-sx^-yytc^oT, tuia/'^-fexig*©/^^ 
§a«©7'^-fex$tj^i73& 

[»*9i 8 ] awe* u sz-iffia*©^ &?sjB.-r-£> t 
B^flB^y^-iaMc^'©^ff$B©*^c^v^T 
^yffisnfe^^rtJcwisfefrSrMa-rsfe®©^ 

. ^©^tgi&iiWT-rsx^'v^tt. 

0 ttf8B^y^-|B^*©^&S9JS1-Sfc»©«!^^Wf 
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z sp^os^* * tz urns. *.mttz>7.7-v 
7£^tiz.£z^}i^&mimziztmm?>?*.* 10 

zmmyva.-* <DKjj^w^mmzmtht=.u 
mmmz&^x. 

fufB^n^Atiu 

m^znt-mitfv^-imtp&tkfzzmmtzvm 20 
mmznt-Wffltfv is-9mmz*(D££xizwmx*z 

Mi^zffi&^ztz&ommtimfvsmx&z tmm 

jKd ^-m&*<D±z<D$k(*izm-zmMi;mzfou 
£.*tmtey\£n.-z\zm7tt&ztztfmtirz>u 30 
im&m 1 1 ] sffie^p v^uz. msM x ) v-m& 

*<D$k{$Zffi&?Zt)to<7)fm$:mi7i-Zfritolz. 

*smfr£^frzmm?z>%miz&\, ^x^m^ntzmm 

&*<D3kfrizm^xBg&&£temm : kft?7 : - * 

mmg&&£te*mm*ftotzsbiz£<m&7?i>*m 
ttmi-r&ymn. 40 
immg&frttci*mizft$ t-wz&mtsmirv-t 
*mmzm-&T9^7.m*s<7)wgz:%:m=.w&\z. m 

SrlulSn > tfa. - 9 (Cliff 3 Z. t * ■5ft* 

*H§P>^ ^/fte©^- # ? r -f mct *-lz;*-r-2>£:«bCD7 
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^Afi, soia*f'j ^-faKg*(D^&j©j£-rsAc«b(D«i 
mzmi-t&t-isbiz, 

sffta^'j ^-la^^w^&^s^^^^c^oaAw? 

SP^fcEtarfSgUli:, 

tmmz&frt tzi*mg.*fto tztbiziim&r >?M*m 

*mmzm-&Tz*7,m^e>m&*%.mz.w&\z. m 

n&r- * sp^©«^ii* * tz urns, zmr-rziimt 

znyex.-*izmt7£-&z>z£Z:im£i-z>wmmi 

2 \znffiL(ozfu j+ismm* 

m&m 1 4 ] v-^T*iBii$tifcw$g(cMu 

mmv i'-nmizi$m;-?z>ffife<D7i'iz?.m#i:3:v 

t>*mLTfuIB^S:jiJE.-rsf-«)©«ia&|^fS-&-5# 

«uia^=&^j£i-s^:«)©^as^i^f$ti^s^^ M 

I BT ^ "fe XH*{C*f L/T7 t^Zm^-fh^WLt Zffi 

m&m 15] T^-fe ^Mt-ifc s ^tcm^7b> u 

^^t> , ffiLTf5IB^5:^T.2.fe«)(7)«ia$:|^T$-& 

m72-txmmzft^xTt-t7.*m-*s?z>^WLii*ffi 
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■ -tts^®^ io 

mrinzxm&izttLTrt-bxzgf^z^&tzffi 

m&mi 7] miT>7-&xttmT'$>zjcmiz-7?t 
xmmzmgjttmmiz&^T. mmTt-t^mmow 

Mfo^mz&izffiz.zzti$:'im£?2>m#mi eiz 

[fffjfcSU 8] TVUXMmX'&ZZmiZttlsTT? 
±Xf%<Z>*-<(AX#y7ZT?-txmmilLXm%&ti 20 
fce>tf7?iz*£8f^-St^e>^£i#o;J<y S/-IB 
*S£&*l*rrs#©i:, 

busbjku r y-im,z^m-^m&oyr t-txm&zgv 
m-tt-m&iz, ws^&itzm&rztL&xD. jcmizri> 

wzznoWffitf&zfrztfrtiM^ziimz. mwm 
mtf&ztmmvfcwrsiz. mmmm^rftaLxmrn 

ime^zm&?zt~to<DW£tfm72nfrWr£iz. m 
mT?-txmmztti,xT?izxZ:ft*s-rz¥-®.£Zffi 30 

^siriB^- * y 7 ;wc7 * -fex-fs fc«><D7 ? 

mmrr z ± * ± xtmx&ZT 1 - # \zmmtt 

v btitztfv >>-ibkE&5i y m utiws z tiz* 
y, a«ET^-t^*#s:ffBr-t**«^s:Sa£"r*sKu 

i'-fffffi^Si:, 40 

S 3 i: 1"S 7 * *: XfWW A„ 

[0 0 0 1] 



«i2 0 0 1-1 84 264 
6 

[0 0 0 2] 

IZ&HZtf U v-©fBii#©i: LTtt, ATT(DKeyNot 
es (BFIK99] (PolicyHaker (BRL96] ) , GACL [WL93] (W 
L98), ASL [JSSB97]fc£jWae>;ftT^S. 7^-feXCDoI 

nTftt^^-fe;* • n>hn-;i/- y*h (ac 
L) ileitis (Subj, Obj, Op) (D3offiU^hS:S 
*tCLT^S. 3*U4. 7?-feXCD±# (Subj) #7? 
-fe*tf)*f^ (Obj) IZMLX. ib&tffl (Op) tfWFSft 

{Cgx.S £#>Kf±. & 3 offl*offl^fcti;jlt 
[0003] JJBfiDiKU 5/HE*#«T?tt. 3tl&®Bg 

T*#s«fc e»tcu $«btc, saK&Kjfc-tsawtsSMM 

feSbtC. ACL(Subj, Obj, 0p)^Cond(Subj, Obj, Op) i: 
^O^O^lz-^Sr^ALT^So -T&;b*., 7^-feX 
H^C^WS&fi^S 3 ojffl*^JC-r*AC LSffl* 
■* S©(i^7t)^UT'feSLffllST:$)S0DT', ^Sjfc&ffl^ 
TaKUSz-SrWrid-ffcLTfe*, *©3Qg»CR!!f*<57* 
•fe^H*tCoV^{i*ff5'tSACL{Cl/fc^oT7^-fe 

[0 0 0 4] ACL(Ci3t-tS®M*f*<D^<Z>|B 

&ib4t?i***i0>t&*. tt#ttflHi£irai (closed w 

orld Assumption) £ LblZ^^tlZ* B3"ffiJ l M£§iT- 
ttU &S7?-fe*H#tC*fLT, ^{C^ffS-TSACL 

^tCtt-e^^ttfP $ ftfcv Nil V * e>fl?f?(C^ 
So Lfc^oT, ACHCffSnsj*f^«WS:Ei4L/T 
feS, 7^1»^M*^ACL©i:*(DX>NUtCt;-^iS:L 

GACL^ ftCfflV Mi^T V ^S*^ WjSW*ft««M^*%je 

ffl^^tlT^So 
[0 0 0 5] jK'JS/-<Z)SWiK5j£tC3^LfeJS«J4*S 

£»fbfcmYe s*fettNo©2«reig-rj:^JC 
LT^S. o*»J, ®^5C?-ACL (subj, obj, op) IZ 
MLX 1 *fe{i0CD^-rtl^(DMA*iIS o 
[0006] 

©7^-fe^JWJCfeWS^'J ^-(DSW^li, 7^-fe 
Xg^C*fUT^';i/-$:SPfillfLfe^mS:Ye s*fcl± 
No©2M(DV^^^^*^tLTV^S. -r3fct)*>, 7i"fex 

i:A^T'S^v^ 3©fe«b, &S&#£i$fc-frtfY e s 
(Yes with condition) ^^.fc^&fu^P&f? 
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[000 7] Z.<Dr=.#>. J r-9<0&Ht J P , 7*-'?*jh 

^lCJSCT7*izX&tlFUfcy^££^e>J:-MC. 81 

[0 0 0 8] *IWl3^©*^*S8l5W^Si!P»^ 
T. T^-feXS#tC?tSfLTT^-feXS:»-r*»flFa3&V^ 10 
IM" t V \ e> £D 7 9 iz XffBT Sr^fiST- g & «fc 3 »C 

[0 0 0 9] J5(C, jfeft#*©7^-fc^«F3IfC*v^TW 

#T'££<fc3fc-f53i:&ftS<z>s&S£-f5. 

[0010] 

iC7*1?;^5£&<Z>7*iZXi^&StftfW'T. UV 
-X K*:a*>ha^3<Z>7?-feXl^©7?iZXM* 

[0 0 11] 33T*, #'J 

fi#@«u m7^m.tmmtbz>m&\z, ^-rtuotMf* 
m%ttmfriz'D^xt<*>izim:-t&z£.*:imiiLz 

^■5. 3*ucj:y, ^^^{c^tc^fS-rsziii^ 40 

[0012] a^z^mmt, mmmim^mz^ 

SfWffiS fettle fc^ffS fc&lCfl&tf)-?- #gfcfrlC#j- 

-r57f-fex?:ii-rs^a-(c, 3Kus/-w«^g«c*r-L 

im#S(±, ^gP^«iSW#^-57^-feXg|#il^ 50 
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iz. W7^mfrt>te2ftfc7?-zxmmz*ti,T*>. 7 
(Dmm& f-izmi<Df-isbizu>Bmz7t t^^ff^ 

3t^fg£&&*T'®*tTV*£. ft. 

tt. 7*tX^T*fe£:£^te©S#T*&oT^ flfi 

[0013] r©fWf#®ji. ^-^y-Oi/tp©^ 

C77t & «f?^*#*ii*/^aE*t*«ffi#a 
xvis-fm^&Lfrt>z<D7>7izxmmztt?z7 
ttt^n&g^mdg&iz. ■r-zsi&^amg 

yffia<z>«ie«:fflj^£S3fc&*#»fcOTvv&. 3*i 

MLJcmT'&ZWr&lZI.Z. XMLf-fi»b-;i/«: 
Sc<*&A,T'#r£&XM L-r- 9 £>Wm<DV - )l> 

sure* s©itra«T»»6. 
[0014] ^sp^em^®^-^^ 

r A MZ 7 * -fe X f £ £«><Z> 7 * -fe & § ttfatf 
T. 7^-trX^TfeST : -^{CgB3*^6tlfc3K'Ji/ 

***^;fr&^*S7*1r**!fW^Ci3VvC, 7* 
•lr^K*SSW#WT, 7^-fexH^(D7^-trx^T* 

■7>> BtffcSaxfejKU S/-8ffi*t»«)*frS:9MW6 
^f7^i:, ^-fffi^cfic^-©* ST-te 

fr*m&*zt-to<mmmftzttf=&!,z. jku */-ie 
mm*. Mm3izitfrfr&^zm&$.tc.tem%tz>t- 

[0 0 15] 3.3.T*, tfVi/-m&tpa>&{$$:fflm^rZ 
x^-y7(±. RvrnttTttt^nrt^ji-Zhm 
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llx^z. z^zzzx. tkv i/-m&p<Dm\v>ik 
mtTt-kxWfaitte&tfv y-mittf&zwrsit. 

*mmzT 9 iz* 5rfppl LT L * e> Z £ fcRSlffS 
[0 0 1 6] $ £tc, zKU is-tm*P<7>3ki l t-&ffi&-*£> 

stir-. xvis-§mtp<Dmm<z>Mzm-3^xmffi?z> 
z\t^X'^^mi<D^(DM^^tni-fx. 20 

m-&kto<Dm*mft&mmtfmMz*\x^z> 

?zmmt>"%M$nx^zfr£?fr*:mE.-tz>izi l t. ± 
-*y htwviyxiizikett zmmtti-ixfemLfiL y * 
[0017] $<btc, sku iz-iBS^^Hftfrfesia-r* 

xng&frtt^tmzfioT-tmti-ztktti+zxT 
mz&&£f-izmmzfiot~Mz ! im&T? j b 

[0 0 18] *f§B^ti, n>fc^-*{Cj£f7£-fc>: 

izmmLt-mm&mz&^x. zozfrnr^^ut* mi 

fr^fRfeoy-r- # -7 y -4 Mzy 5 -fe^f %>tz.&>(DT * -fe 
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&?zt-$><Diimtim7*smx%>z> £vmzt\tz.w& 
iz, frfrzymzmtt&ymt. z<D^^m&.-ts 
&&<D#m-t)Wtf7£ntzmz, ^-is^^t© 
gimztt-tzmmsmzfevx. zcorp-txm&zm- 

SZZ £*<&&£ UX\<^ Z\<D£oiZ-ft\& Z<D? 

<D7tttm^\zttiz^$>T>7ii*mm*:mi'?z>z\ii 

1$XZZ>. 

[0 0 19] ZZX\ yn£-5A«U 3tfy2/-iffi£cptf) 

*ZW££ZMZ=iy¥=L-*lzm452-&Z>ZL£Z!tm 
£LX^^ a Z<D£olZ-fti\,Z, ZCD-Jutf^^u- 

[0020] mmit, ^y¥=L-$\z, ^gp^ 
^m^of 1 - # 7 r mct * -tz x-r ^«b©T ? x 

Sbz^-suzmmfnibnt-titv y-nmzmm-tzm 

tmztifetfv y-im*p iz?(Diz&X'imffixg 

■tz k&cmmmMttffiX'&z £*mzi\t=m&iz. 
frfr&wmzmfrztimt. z<Dm^m^t^>t^ 
o>wmmt7Zixtz.mz. #v y-im*p<D±xcD$ki* 
izMi-zmmsmzmsx. zoTt^xm^zm^-t 
zfi^gfrzmfe? stoma zmfz-tzzm 
m^-zim&mt. z<»tm^m»t>z<nzru>f^i±*: 
bxmn-tz&m^mt ^m^tzz t zmtt v 

T^^o Z(D£$&zfny : 5L,&mmzj:>). -fn? 
<7l*<Dmwmt LXCD-ROMt$<Dmffimfti:fr? 

zt&<< mzizftLxxmsnmizim-tzzttf 
[0021] zzx\ mm£mztmzt\x\^zru>f 
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[0 0 2 2] *«Wti. #-®V-^TIBSS*l 10 

y fefiF5r-r*i:^-5*ftS:**o3Ku ^-faizg$:*&*ft-r^ 

^**#NSU:«:«;t&::fc*:4#»i:LTv*S. 3© J: 20 

xff rT e> 3 £ # pfili: &S. 
[0 0 2 3] *milt. 7? J e*ttmX&2>$:W 

ic z<DT?izxmmzttLXT?izx*:m-*s-?z>¥-m 

£ZffiZ.&Z£Zmk£LX^Z>. Z.<7)£olZ-tn& 

mmt LTxm^^itiz^^x&mmizftozttf-zi 
mx&&. 

[0024] *&m\t> T?iz*ttmx>&z>%m 
izT?^xmmzw%7hts&bi l iz.<D3cm^<DT?±x 40 

m&mrztif-msiz. z<D7?-zxmmzttLX7t 
x©«ke>ici-*u£ xmiz7?-b*mmz%i-fz£Z3k 50 
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ifr£\sT791Z7>&^%:ft5Z.£imm£l£Z>. ZZ 
X\ 79txMMT'$>Z>JcmiZ7?-kxmm : $:Wg&t; 

9ttmm*m%&tit=.mzzo)*m\zmiM\zTiri> 

X-fZ>Z£gft.Z7?-txm-nt(DWmtt%.£VT. -t# 

©3C*©-gPT'& o T <fc \,\ 

[0 0 2 5] *«W»t. 7*lZ****T?*5:SSf 

tC*f LT T * "fe XB#© # >f AX * y Zf*. 7 V "fe 
l/T§£j£trfc e> (ST * -fe X SrffFBT-r -5 1 V * 3 

o#y i/-ffi&zmb*2>¥m£, zaxvy-m&iz 

^^Sriifif 2>fetb<D. JCM\Z7>7±7,8f(7)9-4J*X. 

&zfr£ofrZM'<2>£mz. z<z>mmtfi&z>£¥imL 
tcmotiz, z&mmzwzf&Lxfrfrz^zffi&Tz 

tL«b(D%m$:m7Zl*:Z>^®£. iwafrfciW&tSfc 
X79txZgf*S?Z>^m£1tffiz.ZZ£Zmi£LX 

[0026] $e>tctfe, *5fiWii. r-*77-f;i/i: 

V-X F*r=L*y bfr<b>Z(D7>7-&7.m:&<D79-tXtt 

mx$>z,t- * \zm&ttv e>tife^y y-tmzmv m • 

ys/-iBi&*{c, aK'j i/-fm^m.tm-3imtdvx'iz 
fmxgt£\ / \0k< ! ttfi&z>me<i l z. Q&o>#m$:fioz£\z 
«t »j 3©^ff©fpii* fciii^*^tgA^e) 

ti, 7ftX)tfiffelif-i5t77'f;i'©f-^^(Z) 

IffiiEtC^tL'b ©^2:^o 7 ^ t: XH^^-5I$ tiS z: 
[0 0 2 7] 

mwa>mmv>Mm} jwt, ^f*g®ic^-rn86©^si 
wmzwim?z£. *$mx\*. 7^±^i»miz^x 

Noffl2iT'li«:<, ^-;i^Klc«t&#Mi:U -?•© 
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&If-tJiaiaLM/-;MCf^U ^©f£«CiM!S-fgtf) 
WfiRaT*S«#iWiffS:«v*S. -g-LT, IffflSS:, 

&y, fro, >K'J s/-±flaz*£ttfr, 

[0028] hi ii. *aiw»WBK:ast**r^"fe^« 

££«)<Z>EIT*&5o lUIHiCfcVvT, fflHJ2 0 0»f-* 

y, T^t^^MtfcfeS-r-dr^Sai&ttiWUTV^S. 
^2 2 0{i^-^ < tB|it^>^AT'$>U, 7 s — *nf> 
ii&flU ttSlHSkO-y— ^€rS«-r*. ff23 
Ottn.— tf|g|E^^>7.^T'«>y, a»S*ifea.— If 
«Wfrx-*«a^-A2 0 0(Z)«||g$:5pJMT-#-g>3i: 
5r^$E-r-5o ^2 4 O^^i^M^^X-rAT- 
fcy, a— SW^^WfA 2 3 0 t*C. ^.<D=l 
— Wzj;&fm<D7*-txm£1£VZ$:VtfVX, f*— 
*«l^XfA2 2 Oftftlft*-*-?- t^&flJ/BT- 

2 0 0H T^-feX®J^-9-^£/^A2 4 0lC<k€>T^ 

a-tf KB«**#ll«>flWS Sr^fflfr & ATrf 5o 
S^tf>MT*tt, m^<^g|57r-r;i/3 0 0fr6a— if© 

flWISrflW L »J f * 3 i: frT*£ So 
[0 0 2 9] -^-^USS-tr-/^ 0 OlC&JfotetlT^S 

mmoT- z >$>%m\z 7 ? x u £ ? ^ ii- § a -im, 

a— tf^5 0 0A^-r-^^-!t-A2 0 0CD 
a— !f|gSiE-9-^"i/XT-A 2 3 0iZ7i?-Z* IT^rA 
{CO ^-r>-r S„ i<Z)BR. k~ !f|g|DE-9-^>a^A2 3 

7*lzxfrfr£*iT^£:3.--!f) fr£*e>fr&Wrf So 
^XfrJW-y^X^ 2 4 0 IZM LTWlf-TZ. 7? 

txfmy-fi/XT-j* 2 4 0^ rL—vmu-y-JisxT 

A 2 3 0fr&«W«lofcny>f >HMIPf>a»r7^-fe^SS 
-^{C£oVT7*^*<Z>^£W£i-£o ifflBL & 

ic^-sT^-fe t. prs®*ue«)*s». . t * -t * fri* *i 

^7 7-f;b2 i 0fr£^l-£^-#*£ti:£#frgs# 
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■*ft®M5 oo ^mmztiz. »w&»mco»rvrttfti£ 

1"£fr, 7^i2XM^7 % >*-rA2 4 Oti, 

y, srof-ficWM (n^7r^;i4f) fciiflnb 
fcyi-«ii:fr-e*6. 

[0 0 3 0] @2«, *UB(iOD^fflMCfeW67i'-fe^*J 
£, @2 0)7?i?;*fai#P:>X-rAl 0 0WU 1210)7? 

t< IWi 0ttjjfys/-snK^s;i-;ut?»y. 7*t 
*S#€:£WT, 7*1zx^T'&S^-*icB8jttftt 
&*i£jK'J i/-lBiSS:ffW»-rs. 8^2 0ttgtf7$$t& 
Stt i?n-;i/T** *J , *U i/-az<ffi^ i?n -;u 1 0 fr# 
o-ff?gfc'l-;-e«fPfiiIiT'#^v^(J^T, ^WB^fffcuf 

£frT'£5. LfcfroT, fWfSSfig&iiE^a.-;^ 0 
fpffi^i/-o.-;i/i ofr&g^ofc^WKfeftoWfif^* 

3lfr, *IT V n§ I, N-Ttt(7)iW?^ Vz- -Jl> 3 0 {C «fc 

y ^iifr tco v ^T fe&SE-r So «f» 4 o i* u y - ^ 

fAl 0 0«3>trL-^ftCTl^$*U ±ME^^V=l 
30 -;Wi^S3>tfa-*fC±aB««!«SJtSffS-&*fc«) 

[0 0 3 1] 03 (i, H2cfJlC^$tV^ 
1 0, 2 0, 3 0iZAft±lZftZ>7 : -*(Oft&$:femir 

i?ZL-;Vl 0{CA7JStlST^-fe^H#l 10, 13 0 
©Slfi&li (Subject, Object, Role (or Uid), Operatic- 
n) T'fey, 3KU«>-fMlli^S?a-;bl Ofr&tWSSMB 
• ^ffi^E 2 o ^ns^gp^ff©-^ 113 0 

*rattt*frUXh {Condition-List} T'fey, SWM 

40 jOTte^a -;b 2 o fr e>ifcff * - ;b 3 o s\m 
hwtji^i 2 KDmrntms^m^r^-zMv h 

{Instruction-Set} T'fe-So i£ x )i/-Wi®£V 

=l-)vi octy yy-^K*aji>h4 ofrp,sg*m 
£*v55Kys/-i2xSi 4 ot, sirof-f??^;^ 

1 0^?,f-f^-t)-7'i'7,TA2 2 0 Sr^LTlWf^ 

v3.-;b3 0/\i2ie>*i-5:fcSi 3 4 fWf^e^o.-;!/ 

3 0^e>f-fW7'^fA2 2 0^btf-iI 
7T-01/2 1 0/\i^e>nSIEilrff^l 3 3i:ttXMLi 
S (XML Document) T*&£. ^'J iz-fpfffi^^ 

so -)iio. wmmmt^iJ^-ji 20 Rz&MttXz. 
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-JV3 Ofrl>*tl?tl&t)£ftZ>79-ttt&*Jl 1 
2, 12 0, 13 1 lt7?-k^mzjit?ttm*J$:7jk 
•fr-ZW (a string of "denied") T&y, iKV i/- 

mm^'^-jii o^e 3 mi7$*isT^-fexfF"sri 1 1 

\*7t^Xmmztt^&m^*:jji-*7 1 -*m (a string 
of "permission") T'&y, «tff^^a-;i/3 0*»bflS 
^^ttSUV-Xh^^xn-Kl 3 2&HTML, X 
ML^if^f-^JiJf (HTML, XML, string, et 
c) T*&5„ 

[0 0 3 2] 04 WU 02 tC^L^SItetf^JgUCfctf 10 
ST^-l2X$!lW^^-Al 0 0^7^WI#?:^!llt 
^(DmttWm-tZyu-?-*?- r-T'feSo 04 to* 
3*l£-»tf>#tfltt, n.-if-^e>©T^-fe^*l 1 
0tCJ:»ji3ifr$nS;&\ ifettT^-fe^^C^i-^ 
S©4'T'#^©iWf ; E^a.-;i/3 0 (c«fc y - »c»tc*Mf 

$*vs7^-fexii#i 3 oizzvmitftizmmztiz. 

Tt-bxm&i l o, l 3 ofcgtftfttsi:, jKU 5/- 

4o^e>^mL teff^4oi) , ?<D7i<vi/-9m 20 

1 4 0 ^SMUTTS (X^>y^4 0 2) . -5-LT, £T<7> 

^y is-nm 1 4 o©*®*ft*iw«Hri67f»nii. * 
<Dmms$kizi&sT7t-txwtBSi 1 i*^«r^-irx 

*8t«T1 1 2fcvO|gSK&, §ST^t^I#l 1 0 5: 
f&f? L/fea.— !ftlBSi-S {7>7-Vf4 0 3, 4 0 4, 
405). 

[0 0 3 3] ZL*UC*fU tft'J */-fEjZEl 4 OtfXjUCJtf 

* -;u 1 0 a* e>iw?«sig«feiiE^ ^ -;u 2 0 30 

*ff®flHll 1 3#»3*l* Uf7^4 0 3) . tWf 

«IIB^IE ; E^3.-;b2 oii, S/^-r-ArtWBSStixn 
*fWf^^a-;i/3 ocoyxNSrifo'r^s. fit', 

fW7«ii^iiE : Ei;a.-;i/2 0tt, tt-mki^oxmi 1 3 

•WfeSfca-ZbS OSr^-TS Uf»;^4 0 6) . 
tT, aa«4Wf*ya-;U3 0#j|o*>Mb&fro7y§ 

#1 1 0 S:«ffLfea.— yHCHJ^-S (;Vry7"4 0 
7, 4 0 8) . 40 
[0 0 3 4]-*, SSlEtta^fcSHIf L^tt^T? 

&tfJ5S#f7*>4x£ Uf7^4 0 7, 4 0 9) „ fWf 

=es;n-;i/3 0(cj3^S^K^gp^W>PfiBi©^^y 
tc, jK y i/-fpfffi^ ^a. -jv i oicMoT, $ >b (cflso 

tfySz-iffizEi 4 0O^fif*^f$*lS (x^>y^4 1 

0) „ -g-UT, SSIWlC^y iz-IExgl 4 OCDcptf^T 50 
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n-Ki 3 2tWc7^-b^«FpTl l ltv^ms 
t7^t^I*i l OfcJBffL&a— f-'cui^-rs, * 

£, tWf=E 2>a. 3 0 (CiSttS ^^f-SP^^SHffi© 
ttgffil 3 1 fcl^lSJRftaKET^-feXj&IH 10% 

mihtcz.— wzw#t& c*y-*?4 id. 

[0 0 3 5] Z\ZX\ mf^a.-JV3 01*(D9imziS 
7 * iz 1 3 0 S: jK y $/ - WflFE S> 

3i:tcj;y, «jg^a^«:*r^£#T?s, iz*a.y 

aotcjs^T, mimmkt*%:mtc~ft~toizm&3.-- v 
imm^z>$m.o>mm.*?7 {"txB^t^o fc^^'ft 

)\*>i}—/.Mz79*x LXimwmzimtzzLiitf 

[0 0 3 6] &fC, ^i-^/{CBBLT, &tg£ 

l^iBfCUi^l-S. 05 fit, 4<y ^-SWf*ya-,fl/l 0 
tC<fe57ffy i/-<DWffi7JVdlV XA&SWSf -5 7D-f 
Y-r-T'&6„ 06^t>*07{£, jKySx-ffMB^^a- 
;i/l 0(CAai7J$tl-2>-r-^CD7*-V^ N5:tm^J 
&^-r50T'feSo 05$:#^-r5i:, *r, 7^-lr 
l 0&A7JLTy^^-^$:S(tSl'S U-r»y 
7501) . 7?txm&<DW#;te. m6<D7>?-txm 

#<mz&mt&t:. 7t*7.*mt.^z>±& (=>-— ? 

Zmq-t&r- $T*&& Subject 7^-feX 
MMlZMil-fZ'r-'ZT'&Z Object i:, 79-tXttm 
\Z*SirZ>Wt*.mS-tS>7 : -*T'3bZ Operation 
/^^-^ Z.<DJ*5*-%1*; rsubject^bj 
ect(C*f LT0peration©^ > NSPS(7^"feXtS) 
TV^J &j»»-r*. 06(Cii, 7^-feXH^CD 

*&M#fe*c£;ftT33y, Subject^Nihon Taroh/IBM/J 
apanT?S> *J , Object #http: // admin . trl . com/ / f orm/exp 
ense.xmlTr& 'J > Operation^read(html) TfeS <t ^» 

TNihon Taroh/IBM/Japaniivx-Jn.— tfifeT'D 
y Lt-=l—*fit)\ admin. trl.comir->'A*{ce^tlT 
V^Sexpense.xmltV^7r-r;WC^LT, HTMLf 

fc, 33T't±A^7$:7^-lrXS#l 1 0tL^*\ iWT 
^E^a.-;i/3 0^e 5 ffi^$nt7^-lrxil*l 3 0&A 

[0037] ?^fc, y y-^K^>h4 oco^tcis 
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Tt-t *-# <D±XO>/^ (Subject , 
Object, Operation) £-&%& 2>mHZWim?Z> Uf 
7-/5 0 2) . -eUT, tk&LfzitiVis-jmn 4 0£ 

bSzl— V*Wffl\-$ Subject 7*-fe 
Xif^^£fi$'N-S5 ; -*T'&S Object £, 7?± 
Xf^j^£fSig[|-f -g^-* Operation t. 7<?t* 
Zff°l-?2>&{ ! t<Dm$X'$>Z> Condition LZs^*- 10 

rconditionO^A^S 
*l£B#, SubjecttfObject IZft L TOperationOD^ 

ffimzft-za i:^^e);^-;l/$:Sl*'r•5. meizit 
#U i/-^a'J<Z)^M^f^$*VTfe l J. Subjecttfemp 
loyeeTS> y, Object^http: //admin. trl.eom//form/ex 
pense.xmlTfeU. Operation#read(html)T'£>y. Cond 
ition#transcode(in, o\it)X$>Z>£-3tetf , J I/— Wi\ 
£^LTV*5. 3.©/KU r employee £1 V ^ D 
^ (5 s -* tCT^-fe^-r^fe*?)©^) fcfcofen.- 
■tf*fettT^U>r-i/3>{C*f-LT, 5 s -'**: HTML 20 
{C^tS'^tfT-g-S^lCRgy. attain. trl.oonrb- 
-AlCE/»*lT V ^expense, xml £ V * 5 7 7 4 MZft L 

[0 0 3 8] ZZX% -SikHZ, Subject, Object, Ope 
ration^©M**-etl^n^-r S 3 £ T'&S. 09*. tf. 
T^iZ^^fB^A^-^Subjecttf 'amano' &e> 
tf. T^-feXffJ^U^-^lJ(DtfT' 'amano* tv^ 
=L— tflD^ 'amano' S^tfTR L £\,^o 

CO 0 3 9] T*t^«WjKUS/-SIBFJ®«*K: 

V-X K*;x* > h 4 0(Dtfi{C^$tXTV%S^5 ; - 

£*|g©^JP^ffif;<Z>*|gT*&.5 Environment 
^-*i:-TS. 3(Z)/'N°^^-*li, rEnvironment{i3K 

ICti, ^^-^CDJWfctfJtffB^StlTfcy, Nihon Ta 
roh/ IBM/ Japan £ I ^ -p n.— y-'tiemployeet ^on — ;KC 

&s d t #-eg s t v > o^mmmm^- * t LxmE-r 

M^tC&SNihon Taroh/ IBM/ Japan £ V ^ $ =L— iftfjtf U 
^-^I'JOemployee £ v ^ -J □ — ;u 0 fen— 9* £ v \ 3 

[0 04 0] mz: msmwumn ut, ^r>y^so 

^5 0 3) . #|*_t£ Jtfy S/-^(J{C«feB&&9B£3*l 
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■z^zm&izzomfcmmiziEL < msans «t e> (cm 
Lm^mz.^£<DnsM^n^>o z<D&oiz?n& * 

fflS'C7*-feX LT L* e» 3 £ SrB&jfc-** 3 

[0 0 4 1] mz. ^57^5 0 3T'^QS$tlfe^Ui/ 
-^HIJa^fefWSSrffWBlf-r* (afv^5 0 4) . jtf'Ji' 
-ai!l<Z«feffiJtC U V-^. K*3* > h 4 0 (C^fiE-fS 

o-^t*, uv-^K=¥^.^>f>4 o^ej5*»jai$nfeffi 

[0 0 4 2] f^tc, ^5-^^5 0 S^fPfiB^Sr^L 
Ur>v^5 0 5) , ±T<7)^^|?fiIir5ItgT'feU7t)>o 
^T^i:i¥fflii$tt5.^-«T^-fexfrnrt-rs (x^ 
■^5 0 6) . ±T©^#^ffiT5T|gT-$. l J^C) 

0 . $6"C*fe, f^M^"Ttg^^#^ 
^Ig^IE^ i/'a. -;U 2 0 ^^&^f -f£ (X^ «y y 5 

07) . mi vwm&oym&mz 

ofr^mCD^mcOVxhT'SbZ ExternalCondition & 
3K , Ji/-MI'JC0ConditionCDcf'T% SS^5-*-*-f>, d^U 

a-;H 0 ^ •ifWT^tB^SE^ ^ 2 0a, expens 
e.mlZHTMUZ2mtZZ.£tfT'£Zfr£' : 5frZM 

V=l -JV20 (Djim^&fi L fe^ii, fWT^E Vs. 

-;v 3 o tc £ S^oa &STSO*d< y i/ -SPW^t a. -;b 
2 o*fe«fWT^^-;i/3 o^c^3v^TS^|.Sl^^#$: 

d<U Sz-fFW^^a-;!/! 0(CM-5Zlil^<T^-fe^ 
[0 0 4 3] EI8ii, «Wf«S|g^KE^i>-j.-;i/2 0{Cj: 

so tc.^m^^^^x^i.z^&mm^mk^j^h 
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LT^£ftT^SComponenttf>«^£i^aj-t (X^ 
'V^8 0 1)„ tWf^2?a-;i/U^h*»e>aW9l-6fWf 
*2*i-;b3 0{CH*6«*©*5!Wi, 09 &#H3ir£ 
*fWST^-fe^iS*a)Sfeft»T?** Condition E 
xpression £&Z#!mxgZ>3y?i<-*y b<DmM 
Sr^-T Capability $&-*»imtZ> 3 ytf-* > K 
2i:7ni~ Component Name <£, h<Z)6l$!n?£> 
£ Component Argument £ Sryt^pl — £ i:"^,, B9C 

TfctK Condition Expression#transcode#type#l(*.x 
ml, html)T'&U, Capability Check#Available"??& 

Component Name#c:¥tools¥jar¥enforcerl. jarXSb 
l J, Component Argument#c:¥enforcement¥transcode#t 
ype#l.xslT'&SJ:e)^Hff^A*^E-rSZli:$:^1-„ Z\ 
OMmt r t ranscode#type#li:^e)^Sl^$:m-rEn 
f orcement^^^OT nJHT'fe »J , enf orcerl . jar £ V * r> 
ZfU £*5A{Ctranscode#type#l.xsl t^^O * — $y 

t^jizs-tltt 1 -* zxsm-rz ztiz^v tkimmi 
[0044] mz. mm**: LXKtshtcW&oym- 

Tb^MgSlc-o^o^^um-r Uf>y^8 0 
2) „ ■?-(_, T, X"rvZf8 0 1 T-^fL ^.Condition Ex 
pression^ctUC, X9-V7~8 0 2Xm*J m^tlf^^ 

7^8 0 3) „ -?-<0<fce>fcx>h 'J Jg 
(^<7)^ffi:Condition Express ion £ COSTS' fctrW ft- 

m&zm&^z±T<»4ki*iztt^Tm&tmK>z>±X' 
wmtmvmt u^>^8 0 4) „ ^gp^f$£ 

U -tf&^ofc^li. 7^-feX^fr^ 12 0 &ffi^7L 
[0 04 5] 0±(Dit>iZLX. fr®m-*:mf&-t5>± 

xo^zmx.xtog&zmtcir^y b u - jWtetiS 

^?Tf&. Cl©t£©tMT^^-;i/3 0/MDfW?*§ 

tt^.*ff$StC 33 -SComponen t Name ^Component Argument 

So ((lotusxsl.jar, transcode.xsl) (domhas 

h.jar, signature. xml))"C&5. 

[0046] si o(i, mttVoL-frz cKDmrnm* 
mms-zmx'tb&o mi o im^v*.- 

)V3 Oli, §£&*/^M2^&m^m3 1 fc, XS L 

A3 3^1^, *£&»/^BaStMttffi^a3 l 
tt. XMLX^eW6#*ii*-»f>Se»«:ff-5fW»«:tt 
mi-f>c XSL^Dt7t3 2«u XML^-^ii^H 
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^-^fcfc^^T^&XMLf 1 -* Sr^Jt-r^^p 
©y-;UT'&3„ ^-f^^ni^AS 3tiu XSLy 
□ -fey+r3 2T'Ji^T'£fc^rt^<Z>fW?fi^£|g3g-r 

s^n^A-ea&y, y'^tf^yiz&vmm.om&tm 

M.-t2>Z£tfXgZ> a iWT^^^.-;i/3 OtC^Sgtfffll 
St±. 1 0©tf®XMLit»tC*ftT 

**«©3Hja8fe«:ifeu sn^xMLics^^-rs^i 

• fWfliiSl 2 lii, XMLJficMt «3QH»b--H/S:fB 
10 J4LfeXSLf-ditlT«KSn«. 

[0047] Bill! fWf^E^-^l/S 0{C«fcSfWT 

fflssrswHt-s 7 hT**s. iaii$:#^-r 

St. *r, #£&*/^3g#iM&m¥l&3 ltt. XS 

L-eiaasnfeSQlin/-;!/ (fWrfflsu 2 1) &«0f 

U gQ&*f*T'&.2> XM L %m 1 3 4 tC*f L T*£i&<& 

yilOl). Z.CIT*, DWf=E^3.-;i/3 0{C«fc&#Ui 
tt. lSJ07^tXl*l 1 0 tC**fSfflt«tCi653Kfe* 

20 MtT'feSXMLiSlt Mlfc7^t^ti 1 
0©7?lzx^T*&.2>£{il5g<i&v\ ffilittf. 7^ir 
^1 1 0©T^-feX*f^T^>ST-*-^77"fMCBg 

m-tz>f&<Dy7'Uix&z>m£ : b&z>, *£, 
m*.&mi-xmi 3 4 icfasaewc^t^-;^^ lt 

Z.£tf£>fr-Df-Wr&iZ& i/-fm^^=i--JV 1 0 

1102). ^-LT. JKUi'-fMI : Eya--n/l OA^T 
30 ^*X*8WSnfc»^t®*aK«Hi&ttff1-S (X 
^^^l 10 3). 
[0 0 4 8] jKySz-ffrW^S^a-A/l OtCfeUT^'fe 

fcfflaSr'J V-xK^>h4 0(cSSM$Tfc U 
r«^l 10 8), ^©I^HtC^lfcLfeitSriWfa 
tl^ii : Ei?a.-;i/2 os?>*3KU i/-mm^i?=L-;ii 0 
lZfflHLXmT-t& (Xfy^l 10 9). ZLJUCJ:. 

u. a«a^iw*fettiei«Cr^rtBT»»j. ^^fe 

40 • #£-£tf7 ^-feX^A^g^nl 1 3 1 t*:-5o 

[0 0 4 9] ^'J^-fPfffi^^-^l 0(C<fcy7^-fe 

*f^T'&SXML3fc«l 3 4<Dm&Zft? (X^'V^l 
10 4) . «P^fb^wa**L«®J:-5tC, IWftL/T©^ 

m&3mg*:. xsLX'wms&xgfo^wr&tt. xs 

L^Dt-yy-3 2tC<fcoTBf#^S^L©^:«b©^ 
©^^XMLXf 1 34{CflPALTS3<„ -?-LT, 

Uf7^1 10 5). 

50 [0050] mm& 1 2 1 iz$m2tif=.±x<Dmm 
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m£=tiJ3.-)i2 o&tw; is-wm*v=L-)\, 1 o \z 

1 06, 1 107). XSL^nt>yf3 2t7-fM 
^D^A3 3iCJ:oT^£ft7ctM7£f*XML;£* 
5=-* 14- Mlfrfit^ 1 3 3 £ LT, •r-Z'gm-y-^is* 
fA2 2 0^lTf-^77-f;i/2 1 CHZmZmZtl 
Z>ti\ *fe(iUV-^h^>7.r7-Kl 3 2£L,XTZ 
•fe^HTcDIlI^Fl 1 li:^CT^-fe^g#l 1 0(7)^? 

[0051] *mm<Dmmi:mi>^t-M&&3&mfe 
m\z^xmm-t&. *-f, ^nsgro^srM^r^- 

T'iaM£ft£«$B£7*1z*M##<Mr3f rz. U^-f-L/ 
vb*m&LXm.m?2>Z£*:^o. Z.ZX\t. XML 

^ - ^ TiezR $ nr^m^mm j -ji> Famm** 

*««tfs*ifci:*, mm«ifm.<T>m.^^m> ^htm 
L^fce>«^*3iy&fr*r-rs, i^o^y^-ia 

tfJ^©<ko{Cf2«Ec5tl'5> 0 acl(*, role (employee) , doc 
(hup:// trl. ibm.com/xmlf orm/X) , read(Form)) <- tr 
anscode(X, xml, Form). 
[0 0 5 2] ~niC*fU J^t^^-A&HTML 

?-acl(amano, role (employee) doc(http://trl. ibm.com 
/xmlform/ travelExpenseAccount.xml ) ,read(html)) . 
Zl<0#£, Subject*^'; S>— ia«E, 7?-feXM##lCr 
ole(employee) T— S5[ L, T^iZ XM*tfX)bject#doc (h 
ttp://trl. ibm.com/xmlform/ travelExpenseAccount.xm 
1 )T\ Jtf'J i/-|2i2EC00bjectT*S>-2>doc(http:// trl.i 
bm.com/xralform/X) {C-^iftS^tf)©, Operation 
read(html){Cjitfl/Ttranscode(X, xml, Form) £; v%:?Cond 
ition;WW£ftT^.5<Z>T', tKU i/-fWl^^a-;i/ 

1 OtCfcS^O^t^fWT^-fe^nTil^S. ^ 

•J 2/-Wfli*S?a.-;i/ 1 0 ^ejiMTmi^ii^^j--^ 

2 0^iIP>nS^gP^fpl*, XML 7 AS: HTML 

izm&x g nay t-tx &«f i>rt s £ ^ e> awe* y , 

transcode(travelExpenseAccount.xml, xml, html) 

[0 0 5 3] Ifetfot, Ti't^W^fMOO 
S'XM L T?|B»S ft *-A&HTML (C^1" 

SiWT^^i-^S 0£j$oT^ftl£ 7*-fe*#l*^J 
SftSZltil^S. jtafrfifWr^S^i-^S Otf&S^ 
£\ fWf^^a-^S OlCli, XMLT'gB££ft£Mgl 
7 * - A 5: H TM L IC^gl-r t«b<73X S Lga«B7b^^. 
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e>ft£«, XSL7Dt-^3 2[i 3CDXS LfS&iiTt; 
© 7 * - Af- * £#yi UT^JStf) H TM L 9- Z £ 
£dWS. -£LT, M$nfeHTMLf-^^S!7 

[0 0 5 4] **86®^J»S:fflV^TX«C«-?« 

14, b^y*z2-Tjy>f(DmzW£Lxm.oz.£tfx 

IC, 7i?iZXLt-3.-' *?<DI D £ 1*7 

10 xSrSrBr-rsfcV^*frS:ffl«LTfe<. 
triBBItt, «*.tfEKI© «fc o (cf ffizE^ ft S. 

acl(user(ID) , role(subscriber) , doc(http:// trl.ib 
m.com/image/X) , read)<- embed(X, ID). 

H^cIHhBT'^^V XSL7Dtyf3 2 (CfcV * 

T14, «-^^t%s^fe©feft®#B^*&***S: 
ti&i&frgyite, ff(Z)7^;W7"n y^A3 3 tcio 

o>j;mx$m-?2> Z £ T*g5„ 

[0055] &tc, *m&a>Mmzm^x7 : -*'\(D* 

^U-i/a>tcB§L/TD^ (log) 7r^;i/^co«^ii 

# l/- MCKLT a y («E© SrJS-tftJtB* 

Jfc£>& < Tliv »*»fc>Ky S/- £ LTIBizRLTfc 
?^©«ke»{cfBzE$ftS 0 

acl(user(ID) , role(issuer)., doc(http:// trl.ibm.co 
m/xml f orm/X) , write(*)) <- status (log(ID, issuer, 
X, write, T)). 

[0 0 5 6] dfttcMU IkCD&^tzTt 
^ftfe^COil-rSo 

?-acl(amano, role(issuer) doc(http://trl.ibm.com/x 
mlforra/ travelExpenseAccount.xmltlinputfield) ,wri 
te("cost=$100")). 
40 Z.(D%&. Suhject««jKy 2/-BBZ6. T^-fe^^y&Cr 
ole(issuer)T'— S5[L, 7^-feXS#O0bject*yioc(htt 
p://trl. ibm.com/xmlform/ travelExpenseAccount.xml* 
linputfield)T\ d<«J i>-fai2SC00bjectT'&*doc(htt 
p:// trl.ibra.com/xmlfonn/X)tC'g-ift^)t)(DO, Opera 
tionT'&Swrite("cost=$100")(C*fLTstatus(log(ID, 
issuer, X, write, T) ^^^Condition^^^tftT^ 
-5. ZZX\ statustfl,XF<DJ:-5te)l-)VX2b2>*)<D£ 

status ( log (Subj, Role, Obj, Op, T)) <- log(Subj, R 
50 ole, Op, T). 
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status (log(Subj, Role, Obj, Op, T)) <- makelog(Sub 3". 

j, Role, Op, T). Ztilts remployeeO-;i/$:itoa.— «f«U http://ann 

Z.CD^§£\ £fdlogt^^oWM"r-*l,3mgZ£nX^ ounce/bonus. xml&, 1 9 9 9^6^ 3 Bttt^^tirea 

&l^tf)T*, statusOHlO;u-;Ui^SSrtS. ^LT, dltPS&^oj £V^jftfleT*S. get#time 

mZ(D)V-JVtmm^tlX, makelog(. .)**£#£&£ il^e)>>xf : -Aj7EIS^4^J$:**b> 1 999^6^ 

&Pm7*-tX%t*S£teZ Q 3H«k»;*««:e>t«fefr«!«fcS*U employeetebonus. 

[0 0 5 7] makelog<zai#iS:gttfe*WT i Ey3.--n/3 xml(C*f LTread*tl£&i$oZ.£#T*££>. 
Ott, ^*5fWJffl^l 2 l&»*rl/t7&5 s -*'VZ> [0 0 6 0] ZlCDi^^T^-feX^&^TL/fe^ 

LTPy^ji^CDfctoOT^-fe^Sl^l 3 Ofcai-f. l£ S/^T-A*a#*«Ti'-fe^«!HipS:tT-5-9— ^©2/*. 

IfflT^tXS^l 3 01*. «AtiJS»C<Z>J:-5lCiaS6Sn ^■A^nv^S:SfcBtC3SSLfc«^, *&(*readt0Ktf 

£. J&V^r^Cemployee^readT'^TL*^. readT^iZ^. 

?-acl(sysl, role(system) doc(http://trl. ibra.com/xin £ D i^CJ^Lfci: LTfc. T^-fe^^JOMtC^^A 

lform/ travelExpenseAccount.xml#log ) ,write(log(a V U y 9 Scfeo & B^&T^irXflFnrtC^ft" 

mano, issuer, travelExpenseAccount.xmltissuerFiel £^IE7#1z:*&$l$3li~'5Z.i:#'T?#&V\, ifc, -tr— 

d, write("cost=$100"))). /N'CDi/X^-A^ □ >y ^fottLTte. O S U"<;i/T'0)7£ 

^fFStife^-fSii, □ y<DW%&fr£Mf fc>*U XtCTC 20 O^TOS L/^UCO-lSSlii^^^o 
©T^-trxH^tco^Tt), *fr*tSlfe3tt*^£tcj: [0 0 6 1] 3tUC*fU *mfa(Dmn*:mm3k{ ! ttfZ 

3^T&£:£S4 I K:'{£#3tl£Z.i:(C&.5 ( , acl(user(ID) , role (employee) , doc(http: //announce/ 

[0 0 5 8] IS^CDDy^CD^ii^^iaijU h^>X. bonus. xml), read) :- status (timestamp(S.T)) , verif 

n-^jyycOi^tmmiZXMLJCmSICDmWUl'-Jb y#signature(S) , T > "1999/06/03". 

(XSL<D%fflU\'-}l<Dm£l3lZ'&^T^Z>) 5:fflfL [0 0 6 2] JKU i/-Bffi 1 Zi?a.-A/l 0 (C33^ 

Ti>X5 L AlC^UTfc<„ r*Ui"GR Head" £\,^B 30 T, SKtKU S/-8ffi*<Z)|Pfillf«:ff "3. -3T\ status(t 

&lZM?Z^£imilZM?ZmnZMlZWiBlst~fr}l inestanp(S,T))lCHUT»C©;i/-;i/*«i3i4S*lT^*fc 

^e>zii:S:f^-rsfe«b<DfaKBT'fcs„ 01 2*00^ -r^> 0 

T*ffl^*&Subject;GDg|S;9-ii, status(timestamp(S,T)) :- timestamp(S,T) . 

— (3(D#^}£7?iz;^#<Z>f§fT5T;) status (timestamp(S,T)) :- get#timestamp(S,T) , make 

T*3d£„ -5-LT. &Subject;<DSP^5:|^©^^b&^tC log(timestanip(S,T)) . 

fi^AfeiaMt^-^-tf^&f^LfelWf^tS^ timestampfSJ)^^*^**^^*-* {*, ££'U 

3^5:XSLyDt7t3 2T*flyit- Z>Z£(,Z£>>), H V-X K=¥^* > h 4 0 KS£&£4xT^fc^eDT\ st 

1 3 IZtk-T* o ten 7tfmilU2ftt-$M-tf£j&2nZ>. atuscom 1 <D)l-MZ$;%C?2>. * LT, £12 <Z>;i/-;b 

[0 0 5 9] &{C, #|^tf))£ll£^TB^^^£ #3iM3n, get#timestamp(S,T) , makelog(timestamp 
rt-ex&BjZlf^mffiMlZ-D^-ZWffl^Z. -f>*- 40 (SJ))*<^£fcS^4^£7*i**§ra£fcS. veri 

*>y h±T*A*L J f>j$TC£*?-i>#£\ rzoffimitftRtt fy#signature(S) > " 1999/06/03" te, tf'J 2/-9WB 

ftWfc7^-fe^«HIIS:UieiCtT-5«eai««»&. . tf£7*-fe*fri»ri:«:-&. ft^tC get#timestamp(S, 

li. •f5r^F^{CT^-fea"5rtg{C^:S^i:v^3^ , Ji/-<Z> T), makelog(timestamp(S,T)), verify#signature 

BSeCov^TWrr*. -eo^ei'fciKU^-ti, l*n& (S), &tfr > "1999/06/03" rfWasg^l l 3£fco 

7 ^-feXlf ^(Temporal Authorization) £:n?Wyx T, #U 2/-ffMlf^ya-;H Ofr ^fWT&tB&IE^ 

(DJi^iZmmZiXZo [0 0 6 3] friz. IWfeilg^liE ; Ei>*3.-;b2 OfCfc^ 

acKAnyUserlD, role (employee) , doc (http: //announce T, ^KftflS&ft 5rS«S fetiH^T'gSiWf^^- 
/bonus.xml), read) :-get#time(T) , T > "1999/06/0 50 JV3 CXDmMZ&M-fZ. *W5t*IBWiKS*x 
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-;i/2 0«U Ml 4(C^1-«te)^-^5:JtoT^S 
&(D£~fZ>o 01 4tCzjtf T— Condition Expr 

essionT*^31$ft£pg^£:#!i2IT'£ SiM?^ 3 
00)%** S.O J fflaT?^SiWf ; E^->'l/3 OCDCompon 
ent^Sr^Ufe^Wefe-So 0 1 4 0>f— 7Vl/(C3S<^ 
T, makelog/Hi, 1 5m(Dmakelogi£m%W%~?Z>. fo 
rmula#expression £ (£, E3M'M^J& £-g*/5£SJ!£::§: 

-£'T\ iWT«ilg^IiE ; Ei>'a.->'b2 0^^|jWT ; E^ 10 
=l—JV3 O^v (timestamptprocessor.getttiiDestamp 
(S,T) ) , (log#processor ,makelog(timestamp(S,T) ) ) , 
(siganture#processor, verify#signature(S)h 
(formula#processor,T > "1999/06/03") ) tf&Aft&jk 1 
2l£LXm*>tl2>. 

[0 0 64] &{C, ^^^'3.-^3 OlCfe^T, =&tft 
get#timestamp(S,T)(CMt"'5^Q!S 

get#timestampli, # -f AX # y :/ • -fe v mz J: *J 20 

ommm&7u7?l±m5j&-£nX^Z>. get#timest . 
amp(S.T) :- get#trust(tiraestanip, C), get#timestamp 
(C,T,S).Z:^T?. get#trust/2tt, f-*77^l/2 1 
O^btrust^fffii^lRym-tiElgT'feS., m*.i£7z0> 

trust (times tamp, "http://vwvw.surety.com"). 
'*U£, ^^>timestampi: LT"surety" £ffJ8-f £ 3 
f : -^77-f;u2 1 0fre>-SC#l 4U 
^Ufc^mtLT, getttrusUD^f&CvCtt:, "http:/ 30 
/www.surety.cx3m"^Jt)^T6*lSo 3(2^ get#time 
stampxEgglCj: *J, Surety Timestamp Serviced b&fM 

Timestamp ServiceliSuretylCPg^f 2>Z\£Z:Ml%.Ltc 

[0 0 6 5] makelog(timestamp(S J))»C2tt£#l3i 
makelogte, U7 ■ zfUM y-trSC<fc UffiSHf W7 

• T'n-feyim, lXT<b£5teu>f(DW&fr(Df-tb<DT 40 
*-fe;*J£fcl 3 0 5:|§*rf-5. 

acl(sysl, role(system) , doc (http: //announce/bonus. 
xml#log) , write) 

1 0 0#n^C^£&<*£*fe>«S:#o^ iWf^ 
i?n.-;i/3 0lC*fl/T v jKU iz-SW^E^-;!/! 0*» 
e>7*tX§f^#&£4x5.. Z.tUC«fc»J, makelogtilog 
(times tamp (s ignature#val ue , 1999/06/04) ) <D £ <4 
^>^0«5i*^Te). 50 
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[0 0 6 6] verify#signature(S)lC#-^S#PI 
verify#signatureii, ^^□•fe<v9-(C«fc U#UIS:?t 
0„ fJ&Xty^omZMZtfmU Valid&6X 
(JEL^mZ) . Invalidate (Po£^&) Srig 
-t„ Surety^^MtiValidfe'i:{5^-f £„ 

[0 0 6 7] T > " 1999/06/03" lZtt-?2>®M 

iKMmit. m&7nizyy-iz£>)%m*:ftoa -m#-f 

AX^>^C0^JCDM, -T&*)-£l999/06/04T-&5o - 
tlti, T > "1999/06/03"&tf>T*&31^mi:LTK (iEL 

[0 0 6 8] J.XhtC«fc*j, iWf«atg^2E : E^3.-;i/2 0 
* Nl biWf- : E^3.-;i/3 O'sjgfj get#timestamp(S, 
T), makelog( times tamp (S,T)), verify#signature(S), 
RXJn > "1999/06/03" (D&mjtmi 2 1 te±TKi:& 
£. ZltltCfcU, ^llllfttCtfU^-im^S^-A'l 0 
tC£v>Tg3£c<;ft;fe., acl(user(ID), role(employee) , 
doc(http://announce/bonus.xml) , readJCD^Fti^T 
ffit-2ftt-Z.££&Z>. 

[0 0 6 9] zz\x\ mtrnzwrnLtLftrx^TVizx 

> y^«m^cD*pMtc^$ tit z. £ z&M-t h t\ 
z.£*mm-*z>o tot, mizyx"r2±*gw&tf#v 

-Sl^E^-M O^fWT^^-^S OO^X^A 
0«&#M-r S 3 tC J: o T^ra^F&iE L < *fe§ET'£ 
[0 0 7 0] 

[f§^0fij^] aJ:^UfeJ;e){c, *ftWlz£fr& 
y >7 -fe j3 ^T, T ^ -fe Xg*lC*f U T T ^ "fe X 

^iz&\,\xgmzn&^t>mzWi(D&{!t%:ffi&-?z>z. 
£*m&?2>m&iz. Hmmzmgrnn^izm-zm 

X'SbZ, 

[EI2] &mm<DMmiZi3VZ791zxfflffly*T& 

<D£&ffi!&zwim-tz>t-isb<Dmx°3bz. 

[04] r^-fexM^^X^A^T^-feXil*?:^ 
[05] ^'J^-^M^i?a.-;H otcts^u^- 
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[06] jKU2/-9Mf^2;a-;i/l OfCAflfcfr 3*1-5 
[07] jKUSz-Wflf^^a—^l OlCAffcfrSft* 

[09] IM!WBWiKyaWb2 OtffflV^f-*' 
[010] fWf^E -;b 3 0 OMftMfcfllH-4-SH 
[011] «W^2?a-^/3 0JCj:*«Wj«!BIS:SiW 

[01] 
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[012] <r-9<^<D*'<\s-i/ay\Z&LTU>f-7 

[013] 012 <Z)f BMfCfS DTiSlC O ^tfil^S 
[014] gffiMBtfeSre 5?a-;i, 2 0 #*tfT^ t?n 
•T50T?*>5o 

io i o-jKys/-«fre*;a-^ 

i/a-M 3 o -iW?^2;a.-;k 4 o - y v-x 

a*>K 1 OO-T^-feXflJ^Ii/T.T-A, 2 0 0-f 
A. 2 10-f-^77-<^ 2 2 0-f 
- # mmr'fS/Z.T-b* 2 3 0 -H— b^-b-^S/^f- 
A, 2 4 0 •••T^izXffclWr-^x-rA 
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<K8i:tcO>8tO C3tCb-V~> 

Oal:ca?y> 

. <ul:BC9lv-talDtcs ttlccf "t|Oo|cB=xat 9 IdI 0 |tutOV> 

</»nl :aoj> ^ . 

<Loa dltctasodtvQSuBltct:^ 

<wl:for-«acti MlaF-rnrgar (Poftstot-'a Hoarf , ]]"> 
Ports Qc=3 :© fcad 

boat It* :Oul:«tucr-of ulerf "GsnnitttyV) 

Do I overly QaoiOnlrvaioe-of iflloet»"Dol i»orlj(Oato"/> 

</nl:far-oscfc> 

</Lc3> 

<rtul:tal4to> 
</*»!: JtylMfcwD 
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Data Typ* 


Oofnpoovcite 


Aooeaa Raquest 


(St^jBct. Otyeet Rote (or UldX Operation) 


r..m . — .1 ** - ' 

mni MinaDan 


ICondWorr-LtaU 










Roaouroo Ratrioval 




Pofay RiWmI 


XML Documnt (naa syntax} 


Raaourea Update 




AcoMiOny 


■ string of nhuasd 


Rasouroa Tranaeoda 


HTML, XML atrtn* ete. 
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CcvfltloD torawlos 


CuifaHlty 


Covooot bat 


Mktloc/1 


O 


loa_proc*uor 


CSt_ttautaaV2 


O 


1 laMt»_proc*uor 


verlfy_tlBiaturt/1 


O 


• t «ii tar t j>roc»tior 


fomjlt_eiprt»jlon 


O 


foraul t_arocstsor 
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404 
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408 



(17) 



200 1-184 2 64 



[H5] 



[H6] 



c 



_) 



ttft. 
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507 


|7?n*M. 1 








C-ED @||g) (Z^3 



ASfaA 



72-trX** 
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4 1 to< ic»»t 



Aaa 



rftflwi) 
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fcpn linn (D3I»*». URUWfT«*T<u 
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IH8] 



[011] 



c 



ttf7«ftaiK2?&-/uaiftft 



'801 




803 
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-1101 



1102 
1103 



Yea 



1106 
1107 
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ttfrAJS* 
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1109 



[01 3] 



<Drdtrl.UI> 
<0rdir> 

<PtrtrfU^>SotiMjli ltotar</P»rta«aaw> 

<PirtiNo>t1S4</Partilla> 

<PfoduetTreBXIIcro DrU« D-typ«</ProductTyM> 

<0utntlty>ttO</ttwatlty> 

Oalivar lyfiata>18M/Da7Z1</Dal Itarly0ata> 

</flrdif> 

</0rter> 
</OrderLlat> 



0 



<0rdtrU»t> 
<0rdir> 

<PtrttiaM>SelndU Hatof</PartslUaa> 

<Partsfa>HS4</Parttfti> 

<ProductT»B)ll»cro DfU* O-tyDtK/ProductTypO 

<lfc*ntlb>200</<fciafltlty> ■ 

<Dtt lvarly9ata>1t99/Dfi/21</Dol fvarlyDala> 

</0r4*r> 



</0rd»r> 

</0rd»rlUt> 

<Loi dl$clo»«dto"*XYZ Cor*. ">-i 
Part* Haw :C8 Head 
Entity :Z0O 
Oaiawly Out: I Wfl/M/l> 
Parts Km :G8 Head 
(kiantlty :30Q 
Dtltvtrly Out:1Wt/07/*1 

</Lot> 
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